Administrator is not the "Boss" on this machine.

From: GSCheyenne (anonymous_at_discussions.microsoft.com)
Date: 09/23/04 

Date: Wed, 22 Sep 2004 19:36:56 -0700

I'm running Win2000Pro on a notebook, which only I use,
both as a standone and when I'm at my office to network to
my desktop (running win98se), which only I use.

I really have no real need for "security" in the typical
sense of having one computer or network shared among
numerous users. (I suppose if somebody steals the
computers, they can peek at my blog, or other stuff
similarly useless to anyone else, but then I'll have the
greater worry about getting the computer back.)

So, I want to configure both computers with the MINIMUM of
passwords/lockouts/checkpoints and the MAXIMUM of free and
easy access . . . from myself to myself by myself.

I set up an "account" for myself in the "administrator"
group, naturally. I thought, and intend, that I have ALL
the rights, and nothing I can't change, and that seemed to
be working for a while.

Then the computer began to lock me out of certain
functions, such as changing the "location" of the computer
for dial-up rules. (Although I can go into the DUN
properties and change the rule manually, I can't access
"locations." I get an error saying that the access is
cancelled because of "restrictions on the computer" and "go
see you administrator." BUT I'M SUPPOSED TO BE THE
ADMINISTRATOR. More recently, it refused to send email,
with a msg that "relaying is denied by the adminstrator."

Apparently, in the early days of my stumbling around this
OS (oh, I should mention I've had this only about a month,
and Win2000Pro came with the machine, and w/o
documentation), I must have put some restriction (or
removed some rights) from the administrator definition (is
that what's called "group policy"?). I don't know if this
is related, but I know that I went into the list of
"services" and disabled some which I thought were accessing
websites I had no interest in. Could I have changed one I
shouldn't have?

How can I set if back to its default, where I get ALL the
rights?

Yes, of corse, I can reformat and reinstall WIN2000, BUT
I'm spent most of the month installing and customizing a
few dozen programs, toolbars, desktop formats, and such,
and it would waste a great deal of time if all that were
lost and had to be re-done. If it were necessary to
reformat/reinstall, is it possible to save my configs on
another computer?

Help! anyone!

Thanks.

G.

 

Relevant Pages

  • Re: Least User Priviledges for Network Administrators
    ... While implementing the principle of least privilege is a noble goal I think ... network, disable Windows Updates because they read somewhere it would slow ... users that need administrator access to logon as a regular user and then use ... administrative rights. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Active Directory
    ... It sounds to me like you may have issues with rights delegation. ... assign this new group administrator rights locally. ... Either the local security policy or the assignment of security ... need to deny logon locally and/or deny logon through the network. ...
    (Focus-Microsoft)
  • Re: Permissions (EVERYONE POST TO THIS)
    ... world and say that this is unacceptable practice for any userland ... And yes, developers need admin rights on their machines, but unless ... from the rest of your network be prepared to suffer the wrath and add ... > I am a Network administrator and would never consider this ...
    (microsoft.public.win2000.security)
  • Re: Userenv Event 1030 Problem - cannot edit GPO
    ... group that did already have "log on from network" rights. ... Logged back in as Administrator and now I can ... Eriq Neale - Small Business Specialist, MCSE, MCSA Messaging, Mac Guru EON Consulting - www.eonconsulting.net ...
    (microsoft.public.windows.server.sbs)
  • Re: I need Job Blobb
    ... > Windows and Network administratation. ... > In a job I would like to administrate servers, ... > Title: ISP Network Administrator ... > o Building, installation, configuration and tuning ...
    (microsoft.public.cert.exam.mcse)